Uncontrolled recursion in Decoder.Decode in encoding/gob before Go 1.17.12 and Go 1.18.4 allows an attacker to cause a panic due to stack exhaustion via a message which contains deeply nested structures.
CVSS Details
- CVSS 3.1 Base Score: 7.5
- CVSS 3.1 Vector: (CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H)
Covered by Rapid7
| Product | Vendor Advisory | Solution File | Added | Published |
|---|---|---|---|---|
| Alma_linux | — | Upgrade criuUpgrade runcUpgrade slirp4netnsUpgrade golang-srcUpgrade podman-testsUpgrade libslirpUpgrade aardvark-dnsUpgrade golang-docsUpgrade go-toolsetUpgrade toolbox-testsUpgrade cockpit-podmanUpgrade udicaUpgrade buildah-testsUpgrade buildahUpgrade podman-gvproxyUpgrade golangUpgrade podman-catatonitUpgrade golang-miscUpgrade podman-dockerUpgrade git-lfsUpgrade netavarkUpgrade fuse-overlayfsUpgrade critUpgrade python3-criuUpgrade podman-remoteUpgrade conmonUpgrade grafana-pcpUpgrade podman-pluginsUpgrade container-selinuxUpgrade libslirp-develUpgrade criu-develUpgrade python3-podmanUpgrade containers-commonUpgrade skopeoUpgrade toolboxUpgrade criu-libsUpgrade skopeo-testsUpgrade oci-seccomp-bpf-hookUpgrade golang-testsUpgrade podmanUpgrade containernetworking-pluginsUpgrade delveUpgrade golang-raceUpgrade grafanaUpgrade golang-binUpgrade crun | Aug 8, 2022 | Aug 1, 2022 |
| Alpine Linux | — | Upgrade go | Aug 22, 2024 | Aug 9, 2022 |
| Amazon Linux Ami 2 | — | Upgrade golang-testsUpgrade golang-github-gorilla-context-develUpgrade golistUpgrade golang-raceUpgrade golang-github-kr-pty-develUpgrade golang-miscUpgrade golang-github-gorilla-mux-develUpgrade golist-debuginfoUpgrade runcUpgrade golang-googlecode-sqlite-develUpgrade go-srpm-macrosUpgrade golang-srcUpgrade golang-github-syndtr-gocapability-develUpgrade golang-docsUpgrade go-rpm-macrosUpgrade golang-github-godbus-dbus-develUpgrade golang-sharedUpgrade golang-googlecode-net-develUpgrade runc-debuginfoUpgrade go-rpm-templatesUpgrade golang-binUpgrade golangUpgrade go-filesystem | Oct 11, 2022 | Aug 10, 2022 |
| Amazon_linux | — | Upgrade golang | Sep 30, 2022 | Aug 3, 2022 |
| Amazon_linux_2023 | — | Upgrade golang-github-cpuguy83-md2man-debuginfoUpgrade golang-binUpgrade golang-sharedUpgrade golang-testsUpgrade golang-raceUpgrade golang-docsUpgrade golang-github-cpuguy83-md2manUpgrade golistUpgrade golist-debuginfoUpgrade golist-debugsourceUpgrade compat-golang-github-cpuguy83-md2man-2-develUpgrade golang-srcUpgrade golang-miscUpgrade golangUpgrade golang-github-cpuguy83-md2man-debugsourceUpgrade golang-github-cpuguy83-md2man-devel | Feb 17, 2025 | Jul 12, 2022 |
| Centos_linux | — | Upgrade grafana-pcp-debuginfoUpgrade runc-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade slirp4netns-debugsourceUpgrade podman-debuginfoUpgrade golang-docsUpgrade podman-dockerUpgrade criu-develUpgrade runcUpgrade buildah-testsUpgrade git-lfs-debuginfoUpgrade grafanaUpgrade runc-debuginfoUpgrade containernetworking-pluginsUpgrade podman-debugsourceUpgrade podman-plugins-debuginfoUpgrade podman-remote-debuginfoUpgrade toolbox-debuginfoUpgrade podmanUpgrade aardvark-dnsUpgrade skopeo-testsUpgrade udicaUpgrade python3-criuUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade toolbox-debugsourceUpgrade libslirp-debugsourceUpgrade crunUpgrade golang-testsUpgrade delveUpgrade golang-binUpgrade slirp4netns-debuginfoUpgrade conmon-debuginfoUpgrade toolbox-testsUpgrade critUpgrade libslirp-debuginfoUpgrade git-lfsUpgrade grafana-pcpUpgrade criu-libs-debuginfoUpgrade crun-debugsourceUpgrade podman-remoteUpgrade criu-debugsourceUpgrade podman-gvproxy-debuginfoUpgrade container-selinuxUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade buildah-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade netavarkUpgrade podman-pluginsUpgrade golang-srcUpgrade golang-miscUpgrade criu-libsUpgrade toolboxUpgrade conmon-debugsourceUpgrade golang-raceUpgrade golangUpgrade libslirpUpgrade fuse-overlayfs-debuginfoUpgrade crun-debuginfoUpgrade git-lfs-debugsourceUpgrade libslirp-develUpgrade criu-debuginfoUpgrade podman-catatonit-debuginfoUpgrade buildah-tests-debuginfoUpgrade slirp4netnsUpgrade skopeoUpgrade podman-gvproxyUpgrade fuse-overlayfs-debugsourceUpgrade delve-debugsourceUpgrade conmonUpgrade cockpit-podmanUpgrade delve-debuginfoUpgrade fuse-overlayfsUpgrade skopeo-debugsourceUpgrade podman-testsUpgrade criuUpgrade buildah-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade buildahUpgrade podman-catatonitUpgrade python3-podmanUpgrade containers-commonUpgrade skopeo-debuginfoUpgrade grafana-debuginfo | Aug 2, 2022 | Aug 1, 2022 |
| Debian | — | Upgrade golang-1.19 | Jul 30, 2024 | Aug 10, 2022 |
| Freebsd | — | Upgrade go117Upgrade go118 | Nov 4, 2022 | Jul 13, 2022 |
| Gentoo Linux | — | Upgrade dev-lang/go. | Aug 5, 2022 | Aug 4, 2022 |
| Huawei Euleros 2_0_sp10 | — | Upgrade golangUpgrade golang-helpUpgrade golang-devel | Nov 3, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp5 | — | Upgrade golangUpgrade golang-srcUpgrade golang-bin | Nov 4, 2022 | Aug 10, 2022 |
| Huawei Euleros 2_0_sp9 | — | Upgrade golang-helpUpgrade golangUpgrade golang-devel | Sep 14, 2022 | Aug 10, 2022 |
| Oracle_linux | — | Upgrade podman-gvproxyUpgrade grafanaUpgrade podman-testsUpgrade oci-seccomp-bpf-hookUpgrade containers-commonUpgrade libslirp-develUpgrade criu-develUpgrade golang-srcUpgrade slirp4netnsUpgrade container-selinuxUpgrade libslirpUpgrade crunUpgrade git-lfsUpgrade python3-criuUpgrade criu-libsUpgrade delveUpgrade podman-pluginsUpgrade conmonUpgrade go-toolsetUpgrade cockpit-podmanUpgrade skopeo-testsUpgrade podman-dockerUpgrade python3-podmanUpgrade aardvark-dnsUpgrade containernetworking-pluginsUpgrade grafana-pcpUpgrade buildah-testsUpgrade skopeoUpgrade golang-raceUpgrade buildahUpgrade podman-catatonitUpgrade podman-remoteUpgrade golang-testsUpgrade udicaUpgrade golang-docsUpgrade podmanUpgrade golang-miscUpgrade golangUpgrade fuse-overlayfsUpgrade critUpgrade golang-binUpgrade netavarkUpgrade runcUpgrade criu | Aug 4, 2022 | Jul 12, 2022 |
| Redhat_linux | — | Upgrade grafana-pcpUpgrade criu-debuginfoUpgrade podman-remote-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade fuse-overlayfs-debugsourceUpgrade podman-remoteUpgrade golang-srcUpgrade criu-debugsourceUpgrade podman-catatonitUpgrade containers-commonUpgrade delve-debuginfoUpgrade buildah-debuginfoUpgrade git-lfs-debuginfoUpgrade python3-podmanUpgrade cockpit-podmanUpgrade skopeo-debugsourceUpgrade buildah-tests-debuginfoUpgrade conmon-debugsourceUpgrade toolbox-testsUpgrade criu-libsUpgrade netavarkUpgrade buildah-testsUpgrade conmon-debuginfoUpgrade golangUpgrade criuUpgrade libslirp-develUpgrade podmanUpgrade buildahUpgrade grafana-debuginfoUpgrade containernetworking-pluginsUpgrade crun-debuginfoUpgrade fuse-overlayfsUpgrade golang-raceUpgrade golang-testsUpgrade fuse-overlayfs-debuginfoUpgrade runc-debugsourceUpgrade crun-debugsourceUpgrade golang-miscUpgrade aardvark-dnsUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade podman-pluginsUpgrade delveUpgrade skopeoUpgrade podman-dockerUpgrade udicaUpgrade podman-gvproxyUpgrade podman-debuginfoUpgrade skopeo-debuginfoUpgrade containernetworking-plugins-debuginfoUpgrade go-toolsetUpgrade buildah-debugsourceUpgrade criu-develUpgrade grafanaUpgrade slirp4netns-debuginfoUpgrade conmonUpgrade slirp4netns-debugsourceUpgrade podman-catatonit-debuginfoUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade golang-docsNo solution existsUpgrade delve-debugsourceUpgrade golang-binUpgrade podman-testsUpgrade libslirp-debuginfoUpgrade git-lfsUpgrade critUpgrade podman-gvproxy-debuginfoUpgrade criu-libs-debuginfoUpgrade python3-criuUpgrade libslirp-debugsourceUpgrade containernetworking-plugins-debugsourceUpgrade libslirpUpgrade toolbox-debuginfoUpgrade podman-debugsourceUpgrade toolbox-debugsourceUpgrade crunUpgrade grafana-pcp-debuginfoUpgrade runc-debuginfoUpgrade slirp4netnsUpgrade skopeo-testsUpgrade container-selinuxUpgrade runcUpgrade git-lfs-debugsourceUpgrade podman-plugins-debuginfoUpgrade toolbox | Aug 3, 2022 | Aug 1, 2022 |
| Rocky_linux | — | Upgrade delve-debugsourceUpgrade criu-develUpgrade golang-raceUpgrade libslirpUpgrade delveUpgrade libslirp-debugsourceUpgrade oci-seccomp-bpf-hook-debuginfoUpgrade grafana-pcp-debuginfoUpgrade git-lfs-debugsourceUpgrade oci-seccomp-bpf-hook-debugsourceUpgrade criuUpgrade criu-libs-debuginfoUpgrade git-lfsUpgrade criu-libsUpgrade python3-criuUpgrade libslirp-develUpgrade criu-debugsourceUpgrade critUpgrade go-toolsetUpgrade golangUpgrade git-lfs-debuginfoUpgrade libslirp-debuginfoUpgrade grafana-pcpUpgrade criu-debuginfoUpgrade oci-seccomp-bpf-hookUpgrade delve-debuginfoUpgrade grafana-debuginfoUpgrade golang-binUpgrade grafana | Mar 12, 2024 | Aug 10, 2022 |
| Splunk | — | Upgrade Splunk Enterprise to version 9.0.5Upgrade Splunk Enterprise to version 9.0.6Upgrade Splunk Enterprise to version 9.1.1Upgrade Splunk Enterprise to version 8.2.12Upgrade Splunk Enterprise to version 8.1.14Upgrade Splunk Enterprise to version 8.2.11 | Sep 30, 2025 | Aug 9, 2022 |
| Suse | — | Upgrade go1.17-docUpgrade go1.18Upgrade go1.18-opensslUpgrade go1.18-docUpgrade go1.18-openssl-docUpgrade go1.17-raceUpgrade go1.18-raceUpgrade go1.17Upgrade go1.18-openssl-race | Oct 26, 2022 | Aug 10, 2022 |
| Ubuntu | — | Upgrade golang-1.16 (Ubuntu Pro)Upgrade golang-1.13 (Ubuntu Pro)Upgrade golang-1.13-src (Ubuntu Pro)Upgrade golang-1.13-srcUpgrade golang-1.13Upgrade golang-1.13-go (Ubuntu Pro)Upgrade golang-1.18-goUpgrade golang-1.16-go (Ubuntu Pro)Upgrade golang-1.18-srcUpgrade golang-1.16Upgrade golang-1.18Upgrade golang-1.16-goUpgrade golang-1.16-src (Ubuntu Pro)Upgrade golang-1.16-srcUpgrade golang-1.13-go | May 1, 2023 | Aug 10, 2022 |
| Vmware Photon_os | — | Use 'tdnf update' to upgrade all packages to the latest version. | Jan 20, 2025 | Aug 9, 2022 |
Prioritise with Active Threat Intelligence
With curated Threat Intelligence, you can see which vulnerabilities truly put you at risk, prioritize what matters most, and act before attackers do.
Explore Intelligence Hub